System and methods for secure entry of a personal identification number (PIN)

ABSTRACT

Systems and methods for credential character selection are provided. The system includes one or more sensors configured to detect a character selection and generate a character selection signal, and detect a character selection completion and generate a character selection completion signal. The system also includes one or more processors coupled to the one or more sensors, the one or more processors configured to receive the character selection signal and the character selection completion signal, and generate an output signal based on the received character selection signal that includes components of a credential. The system also includes a network interface component configured to transmit the output signal. The credential characters may be components of a PIN or password. Moreover, the credential character selections may be made on one device, but displayed on a separate coupled device. The character selections may be a selection of a character or a modification of character.

CROSS REFERENCE TO RELATED APPLICATIONS

This application is a Continuation-in-Part of U.S. patent applicationSer. No. 13/413,063, filed on Mar. 6, 2012. This application also claimspriority to U.S. Provisional Application No. 61/706,691, filed on Sep.27, 2012. The entire contents of these applications are herebyincorporated by reference herein in their entirety.

BACKGROUND

1. Technical Field

Embodiments disclosed herein are related to systems and methods forenabling the secure entry of credentials such as personal identificationnumbers (PINs). In particular, systems and methods disclosed herein mayprovide for the secure input of a PIN on an input device that has one ormore sensors used to receive inputs and transmit the inputs to a displaydevice coupled to the input device.

2. Related Art

Integrated circuit (IC) cards, also known as “Chip and PIN” cards orEuropay, MasterCard and Visa (EMV) cards have become the standardfinancial transaction cards, also known as credit or debit cards, thatare used in Europe. These cards include an integrated circuit chipembedded thereon which is designed to be read by an IC chip reader at apoint of sale (POS) terminal when conducting a financial transaction,such as purchasing goods. In order to authenticate the transaction, thepayer is typically required to enter a PIN associated with the IC chipusing a keypad on the POS terminal. In addition to, or instead of,entering a PIN, a payer may be required to authenticate the transactionusing a signature.

Modern mobile devices are capable as acting as POS terminals using acard reader in communication with the mobile device, such as the PayPalHere™ device offered by PayPal of San Jose, Calif. However, thesedevices are currently only able to process traditional magnetic stripefinancial transaction cards. Efforts to develop an IC chip reader foruse with a mobile device have had difficulty in gaining approval andcertification due to the inherent insecurity of the mobile device.Mobile devices may have malware executing thereon which may be designedto capture a user's PIN or other information from the IC chip that couldbe read by a mobile IC chip reader.

Accordingly, there is a need for a system and method that enables thesecure entry of credentials such as personal identification numbers(PINs). In particular, there is a need for systems and methods thatallow the secure input of a PIN associated with an integrated circuitchip embedded on a financial transactions card by using a mobile devicethat is communication with a card and integrated circuit chip readerthat is in communication with the mobile device and displays the PIN.

BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a block diagram of a networked system, consistent with someembodiments.

FIG. 2 is a diagram illustrating a computing system, consistent withsome embodiments.

FIG. 3 is a diagram illustrating a system including a computing systemin communication with a display unit, consistent with some embodiments.

FIG. 4 is a diagram illustrating a system including a computing systemin communication with a display unit having card or IC chip reader,consistent with some embodiments.

FIG. 5 is a diagram illustrating a system including a computing systemin communication with a display unit, consistent with some embodiments.

FIG. 6 is a diagram illustrating a system including a computing systemin communication with a display unit, consistent with some embodiments.

FIG. 7 is a diagram illustrating a system including a computing systemin communication with a display unit, consistent with some embodiments.

FIG. 8 is a diagram illustrating a system including a computing systemin communication with a display unit, consistent with some embodiments.

FIG. 9 is a diagram illustrating a system including a computing systemin communication with a display unit, consistent with some embodiments.

FIG. 10 is a diagram illustrating a one dimensional random sequence ofcharacters of a credential, consistent with some embodiments.

FIG. 11 is a diagram illustrating a two dimensional random sequence ofcharacters of a credential, consistent with some embodiments.

FIG. 12 is a diagram illustrating a two dimensional random array ofcharacters of a credential, consistent with some embodiments.

FIG. 13 is a flowchart illustrating a method for inputting a state,consistent with some embodiments.

FIG. 14 is a flowchart illustrating a method for character credentialselection, consistent with some embodiments.

FIG. 15 is a flowchart illustrating a method for character credentialselection, consistent with some embodiments.

In the drawings, elements having the same designation have the same orsimilar functions.

DETAILED DESCRIPTION

In the following description specific details are set forth describingcertain embodiments. It will be apparent, however, to one skilled in theart that the disclosed embodiments may be practiced without some or allof these specific details. The specific embodiments presented are meantto be illustrative, but not limiting. One skilled in the art may realizeother material that, although not specifically described herein, iswithin the scope and spirit of this disclosure.

Consistent with some embodiments, there is provided a system forcredential character selection. The system includes one or more sensors,the one or more sensors configured to detect a character selection andgenerate a character selection signal, and detect a character selectioncompletion and generate a character selection completion signal. Thesystem also includes one or more processors coupled to the one or moresensors, the one or more processors configured to receive the characterselection signal and the character selection completion signal, andgenerate an output signal based on the received character selectionsignal, the output signal including components of a credential. Thesystem further includes and a network interface component configured totransmit the output signal.

Consistent with some embodiments, there is also provided a method ofcredential character selection. The method includes steps of detecting acharacter selection, generating a character selection signal, detectinga character selection completion, generating a character selectioncompletion signal, receiving the generated character selection signaland the generated character selection completion signal, and generating,by the one or more processors, an output signal including components ofa credential; and transmitting the output signal.

Consistent with some embodiments, there is also provided a display unit.The display unit includes one or more processors configured to producean initial state, modify the initial state based on receivedmodifications to the initial state, and encrypt a final state based on areceived indication that the final state has been achieved. The displayunit also includes a memory coupled to the one or more processors, and anetwork interface component configured to receive the modifications tothe initial state, receive the indication that a final state, has beenachieved, and transmit the encrypted final state. The display unit alsoincludes a display coupled to the one or more processors, the displayconfigured to display the initial state, the modifications to theinitial state, and the final state.

Consistent with some embodiments, there is also provided an inputdevice. The input device includes one or more processors, a memorycoupled to the one or more processors, one or more sensors configured togenerate user signals based on detected user actions; a user interfaceconfigured to receive the user signals, and network interface componentin communication with a display unit, the network interface componentconfigured to transmit the received user signals to the display unit,wherein the user signals comprise modifications to an initial state ofthe display unit and an indication of a final state of the display unit.

Consistent with some embodiments, there is further provided a method forinputting a personal identification number (PIN), using a display unitthat displays the PIN. The method includes steps of generating, by thedisplay unit, an initial PIN state, displaying, by the display unit, theinitial PIN state, receiving, by the display unit, signals for modifyingthe displayed initial PIN state, receiving, by the display unit, signalsindicating that the modified PIN state is a final PIN state, andencrypting, by the display unit, the final PIN state; and transmittingthe final PIN state.

A computer-readable medium is provided. The computer-readable medium mayinclude instructions that, when executed by one or more processors of acomputing device cause the computing device to perform a method ofcredential character selection. The method includes steps of displayinga sequence of credential characters, highlighting a first credentialcharacter in the sequence; periodically highlighting remainingcredential characters in the sequence at a predetermined rate, detectinga credential character selection, determining timing information fromthe detected credential character selection and the predetermined rate,detecting a character selection completion, generating a characterselection completion signal, reconstructing a credential based on thebased on the determined timing information, and transmitting an outputsignal including the reconstructed credential.

These and other embodiments will be described in further detail belowwith respect to the following figures.

FIG. 1 is a block diagram of a networked system 100, consistent withsome embodiments. System 100 includes a client computing device 102 anda remote server 106 in communication over a network 108. Remote server106 may be a payment service provider server that may be maintained by apayment provider, such as PayPal, Inc. of San Jose, Calif. Remote server106 may be maintained by other service providers in differentembodiments. Remote server 106 may also be maintained by an entity withwhich sensitive credentials and information may be exchanged with clientcomputing device 102. Remote server 106 may be more generally a website, an online content manager, a service provider, such as a bank, orother entity who provides content to a user requiring userauthentication or login.

Network 108, in one embodiment, may be implemented as a single networkor a combination of multiple networks. For example, in variousembodiments, network 108 may include the Internet and/or one or moreintranets, landline networks, wireless networks, and/or otherappropriate types of communication networks. In another example, thenetwork may comprise a wireless telecommunications network (e.g.,cellular phone network) adapted to communicate with other communicationnetworks, such as the Internet.

Client computing device 102, in one embodiment, may be implemented usingany appropriate combination of hardware and/or software configured forwired and/or wireless communication over network 108. For example,client computing device 102 may be implemented as a wireless telephone(e.g., smart phone), tablet, personal digital assistant (PDA), notebookcomputer, personal computer, a connected set-top box (STB) such asprovided by cable or satellite content providers, or a video game systemconsole, a head-mounted display (HMD) or other wearable computingdevice, including a wearable computing device having an eyeglassprojection screen, and/or various other generally known types ofcomputing devices. Consistent with some embodiments, client computingdevice 102 may include any appropriate combination of hardware and/orsoftware having one or more processors and capable of readinginstructions stored on a tangible non-transitory machine-readable mediumfor execution by the one or more processors. Consistent with someembodiments, client computing device 102 includes a machine-readablemedium, such as a memory (not shown) that includes instructions forexecution by one or more processors (not shown) for causing clientcomputing device 102 to perform specific tasks. For example, suchinstructions may include authentication app 112 for authenticatingclient computing device 102 to remote server 106. Consistent with someembodiments, authentication app 112 may be a mobile authentication app,which may be used to authenticate user 120 to remote server 106 overnetwork 108. Authentication app 112 may include a software program, suchas a graphical user interface (GUI), executable by one or moreprocessors that is configured to interface and communicate with theremote server 106 or other servers managed by content providers ormerchants via network 108. Authentication app 112 may interface with adisplay unit that may be coupled to client computing device 102 andconfigured to display characters of a credential that may be used toauthenticate with remote server 106. Authentication app 112 may alsointerface with one or more sensors coupled to and/or integrated inclient computing device 102 for detecting character selection,modification, and completion signals, which may be indicative of user120 indicating characters of a credential that may be used toauthenticate with remote server 106.

Client computing device 102 may include a browser app 114. Browser app114 may be a mobile browser app, which may be used to provide a userinterface to permit a user 120 to browse information available overnetwork 108. For example, browser application 114 may be implemented asa web browser to view information available over network 108. Browserapplication 114 may include a software program, such as a graphical userinterface (GUI), executable by one or more processors that is configuredto interface and communicate with remote server 106 or other serversmanaged by content providers or merchants via network 108. For example,user 116 is able to access websites to find and purchase items, as wellas access user account information or web content. Client computingdevice 102 may also include other applications 116 as may be desired inone or more embodiments to provide additional features available to user120, including accessing a user account with remote server 106. Forexample, applications 116 may include interfaces and communicationprotocols that allow the user to receive and transmit informationthrough network 108 and to remote server 106 and other online sites.Applications 116 may also include security applications for implementingclient-side security features, programmatic client applications forinterfacing with appropriate application programming interfaces (APIs)over network 108 or various other types of generally known programsand/or applications. Applications 116 may include mobile apps downloadedand resident on client computing device 102 that enables user 120 toaccess content through the apps.

Remote server 106, according to some embodiments, may be maintained byan online payment provider, which may provide processing for onlinefinancial and information transactions on behalf of user 120. Remoteserver 106 may include at least authentication application 122, whichmay be adapted to interact with authentication app 112 of clientcomputing device 102 over network 108 to authenticate client computingdevice 102 to remote server 106. According to some embodiments,authentication app 122 may send information over network 108 to clientcomputing device 102 for use by authentication app 112 forauthenticating user 122 to remote server 106.

Remote server 106 may also include an application database 124 forstoring various applications for interacting with client computingdevice 102 over network 108 for purposes other than authentication. Suchapplications may include applications for authentication, conductingfinancial transactions and shopping and purchasing items. Remote server106 may also include an authentication database 126 that may storeinformation for authentication application 122 to use duringauthentication. Authentication database 126 may also store informationabout user 120, such as account information, personal information, andstored credentials of user 120.

FIG. 2 is a diagram illustrating computing system 200, which maycorrespond to either of client computing device 102 or remote server106, consistent with some embodiments. Computing system 200 may be amobile device such as a smartphone, a tablet computer, a personalcomputer, laptop computer, netbook, or tablet computer, set-top box,video game console, head-mounted display (HMD) or other wearablecomputing device as would be consistent with client computing device102. Further, computing system 200 may also be a server or one serveramongst a plurality of servers, as would be consistent with remoteserver 106. As shown in FIG. 2, computing system 200 includes a networkinterface component (NIC) 202 configured for communication with anetwork such as network 108 shown in FIG. 1. Consistent with someembodiments, NIC 202 includes a wireless communication component, suchas a wireless broadband component, a wireless satellite component, orvarious other types of wireless communication components including radiofrequency (RF), microwave frequency (MWF), and/or infrared (IR)components configured for communication with network 108. Consistentwith other embodiments, NIC 202 may be configured to interface with acoaxial cable, a fiber optic cable, a digital subscriber line (DSL)modem, a public switched telephone network (PSTN) modem, an Ethernetdevice, and/or various other types of wired and/or wireless networkcommunication devices adapted for communication with network 108.

Consistent with some embodiments, computing system 200 includes a systembus 204 for interconnecting various components within computing system200 and communication information between the various components. Suchcomponents include a processing component 206, which may be one or moreprocessors, micro-controllers, or digital signal processors (DSP), asystem memory component 208, which may correspond to random accessmemory (RAM), an internal memory component 210, which may correspond toread-only memory (ROM), and an external or static memory 212, which maycorrespond to optical, magnetic, or solid-state memories. Consistentwith some embodiments, computing system 200 further includes a displaycomponent 214 for displaying information to a user 120 of computingsystem 200. Display component 214 may be a liquid crystal display (LCD)screen, an organic light emitting diode (OLED) screen (including activematrix AMOLED screens), an LED screen, a plasma display, or a cathoderay tube (CRT) display. Computing system 200 may also include an inputcomponent 216, allowing for a user 120 of computing system 200 to inputinformation to computing system 200. Such information could includepayment information such as an amount required to complete atransaction, account information, authentication information such as acredential, or identification information. An input component 216 mayinclude, for example, a keyboard or key pad, whether physical orvirtual. Computing system 200 may further include a navigation controlcomponent 218, configured to allow a user to navigate along displaycomponent 214. Consistent with some embodiments, navigation controlcomponent 218 may be a mouse, a trackball, or other such device.Moreover, if device 200 includes a touch screen, display component 214,input component 216, and navigation control 218 may be a singleintegrated component, such as a capacitive sensor-based touch screen.

Computing system 200 may perform specific operations by processingcomponent 206 executing one or more sequences of instructions containedin system memory component 208, internal memory component 210, and/orexternal or static memory 212. In other embodiments, hard-wiredcircuitry may be used in place of or in combination with softwareinstructions to implement the present disclosure. Logic may be encodedin a computer readable medium, which may refer to any medium thatparticipates in providing instructions to processing component 206 forexecution. Such a medium may take many forms, including but not limitedto, non-volatile media, volatile media, and transmission media. Themedium may correspond to any of system memory 208, internal memory 210and/or external or static memory 212. Consistent with some embodiments,the computer readable medium is tangible and non-transitory. In variousimplementations, non-volatile media include optical or magnetic disks,volatile media includes dynamic memory, and transmission media includescoaxial cables, copper wire, and fiber optics, including wires thatcomprise system bus 204. According to some embodiments, transmissionmedia may take the form of acoustic or light waves, such as thosegenerated during radio wave and infrared data communications. Somecommon forms of computer readable media include, for example, floppydisk, flexible disk, hard disk, magnetic tape, any other magneticmedium, CD-ROM, any other optical medium, punch cards, paper tape, anyother physical medium with patterns of holes, RAM, PROM, EPROM,FLASH-EPROM, any other memory chip or cartridge, carrier wave, or anyother medium from which a computer is adapted to read.

In various embodiments of the present disclosure, execution ofinstruction sequences to practice the present disclosure may beperformed by computing system 200. In various other embodiments of thepresent disclosure, a plurality of computing systems 200 coupled by acommunication link 220 to network 108 (e.g., such as a LAN, WLAN, PTSN,and/or various other wired or wireless networks, includingtelecommunications, mobile, and cellular phone networks) may performinstruction sequences to practice the present disclosure in coordinationwith one another. Computing system 200 may transmit and receivemessages, data and one or more data packets, information andinstructions, including one or more programs (i.e., application code)through communication link 220 and network interface component 202.Communication link 220 may be wireless through a wireless data protocolsuch as Wi-Fi™, 3G, 4G, HDSPA, LTE, RF, NFC, or through a wiredconnection. Network interface component 202 may include an antenna,either separate or integrated, to enable transmission and reception viacommunication link 220. Received program code may be executed byprocessing component 206 as received and/or stored in memory 208, 210,or 212.

Computing system 200 may also include sensor components 222. Sensorcomponents 222 may include any sensory device that captures informationrelated to the surroundings of computing system 200. Sensor components222 may include camera and imaging components, accelerometers, GPSdevices, motion capture devices, and biometric sensors, and otherdevices that are capable of providing information about computing system200, user 120, or their surroundings. In some embodiments, sensorcomponents 222 including an accelerometer may be used to detect a motionof computing system 200 made by a user that may be indicative of a userrecognition of a displayed character or digit of a credential. Sensorcomponents 222 may include a microphone configured to detect a voice ofuser 120 and translate the detected voice into an electrical signal thatmay be interpreted by processing component as being indicative of a userrecognition of a displayed character or digit of a credential, or ascorresponding to a particular number, action, or direction in entering acredential. For example, user 120 may say the credential aloud and themicrophone will detect this and translate this into text correspondingto the credential. In another example, user 120 may be presented withcredential components, and may be able to speak an indication, such as“yes”, “ok”, “that's it”, etc. to indicate that a particular credentialcomponent corresponds to a user credential component. User 120 may beable to further speak “next”, “left”, “right”, etc. to select additionalcredential components.

Sensor components 222 may include one or more physiological responsesensors. In some embodiments, a physiological response may be a slightor subtle facial or body movement. For example, the user can blink,wink, smile, frown, wave, or make a subtle facial movement, the user'svoice or another sound made or controlled by the user. Physiologicalresponse sensors may include cameras and microphones, and the like.Sensor components 222 may also include brain activity sensors. Brainactivity sensors may be part of a hat, helmet, or other item that isworn or placed in close proximity with a user's head. Brain activity maybe such as sensing the user concentrating, tensing muscles, or doingnothing conscious. Brain activity may be sensed by an EEG that can sensebrain activity associated with a thought, a muscle contraction, or auser recognition of a displayed character or digit of a credential.Sensor components 222 may include a button and/or can sense when abutton or other switch or input device is actuated. The button can behidden from view by bystanders. The button can be shielded from viewsuch that a user's hand that is operating the button is also shieldedfrom view. Sensor components 222 may include capacitive or other touchscreen sensing components, such as may be found in a touch-screencomputing device. Sensor components 222 may include a camera. The cameracan capture images that are indicative of a physiological response. Thecamera may be a visible light camera or a depth-sensing camera, such asthe Microsoft® Xbox™ Kinect™ camera. The camera may also be configuredto detect infrared (IR) light or ultraviolet (UV) light. The camera mayalso be a stereo camera, a time-of-flight (ToF) camera, or other cameracapable of detecting capturing information about computing system 200,user 120, or their surroundings. Sensor components 222 may be integratedwith computing system 200 or may be separate from and coupled tocomputing system 200. Sensor components 222 may interface with at leastone of input component 216 and navigation control component 218 suchthat information captured by the sensor may be used for input and/ornavigation control. In some embodiments, information captured by sensorcomponents 222 may be used to modify and select characters of acredential.

FIG. 3 is a diagram illustrating a system including a computing systemin communication with a display unit, consistent with some embodiments.As shown in FIG. 3, system 300 includes computing system 200 incommunication with a display unit 302. In some embodiments, computingsystem 200 may correspond to client computing device 102 shown inFIG. 1. Display unit 302 may include one or more processors (not shown)and a machine-readable medium, such as a memory (not shown) thatincludes instructions for execution by the one or more processors (notshown) for causing display unit 302 to perform specific tasks. Forexample, such instructions may include displaying content, such as auser credential, modifications to the user credential, an initial randomor pseudo-random state of the user credential, and a final state of theuser credential. In some embodiments, at least the displayed usercredential, modifications to the user credential, and an indication of afinal state of the user credential may be received from computing system200, which may be in communication with display unit 302.

Computing system 200 may be in communication with display unit 302 usinga wireless connection, such as a Bluetooth™ connection, a Wi-Ficonnection, an infrared (IR) connection, or other such wirelessconnections. Computing system 200 may also be in communication withdisplay unit 302 using a wired connection or, in some embodiments,display unit 302 may be directly coupled to mobile device using aplug-in coupling. As shown in FIG. 1, computing system 200 may include auser interface 304 that is configured to receive inputs from a user formodifying a state displayed by display unit 302. User interface 304 maybe displayed by a display component 214 of computing system 200.

Although not shown, display unit 302 may also include one or moreprocessors, a memory, and a network interface component similar to theone or more processors, memory, and network interface component ofcomputing system 200, described above. The one or more processors,memory, and network interface component may be integrated on a singleintegrated circuit, such as an application-specific integrated circuit(ASIC), or on multiple integrated circuits. In some embodiments, displayunit 302 is a minimalist device that may not be running any operatingsystem and, thus, may not be susceptible to malware. In someembodiments, display unit 302 may be a secure device that is only incommunication with computing system 200, making it more difficult formalware to reach display unit 302. In such embodiments, display unit 302may only be in communication with a single computing system 200 at atime, but computing system 200 in communication with display unit 302may be changed by a user.

Display unit 302 may also include a display component 306 that may be aliquid crystal display (LCD) screen, an organic light emitting diode(OLED) screen (including active matrix AMOLED screens), an LED screen, aplasma display, or a cathode ray tube (CRT) display. Consistent withsome embodiments, the one or more processors of display unit 302 may beconfigured to execute instructions stored in memory to display a stateon display component 306. The displayed state may be an initial statethat is generated by the one or more processors of display unit.Further, the initial state may be generated randomly or pseudo-randomly.The network interface component of the display unit 302 may beconfigured to receive signals from computing system 200 corresponding tomodifications of the displayed initial state input by a user usingcomputing system 200. As the signals corresponding to modifications arereceived, the one or more processors will process the received signalsto determine the modification being made to the displayed initial stateand provide instructions to display component 306 for displaying themodified state. Display unit 302 may have an associated media accesscontrol (MAC) address. The MAC address may be used in authentication ofa final state.

Consistent with some embodiments, display unit 302 may include two ormore networked devices in communication with one another. In suchembodiments, the initial state may be generated on one device, forexample, while the generated initial state is transmitted to anotherdevice that includes the display component and displays the generatedinitial state. According to some embodiments, the one or more processorsand memory may be in the device that generates the initial state, whilethe display component is in the device that displays the initial state.Moreover, all of the networked devices in communication with each othermay include a network interface component.

As shown in FIG. 3, display unit 302 displays an initial state 308 thatincludes four digits. Although only four digits are shown, display unit302 may be capable of displaying n digits or characters, consistent withthe specifications of display component 306. User interface 306 ofcomputing system 200 displays one or more modifiers 310 that are used asinputs for transmitting signals indicative of modifications to initialstate 308. Consistent with some embodiments, modifiers 310 may representa specific increment or decrement of the digits of the initial state.For example, as shown in FIG. 3, initial state 308 is displayed as“4753”. A user using computing system 200 may use modifiers 310 toincrement or decrement the digits of initial state 308 such that movinga the first modifier 310 to “−2” would send a signal to display unit 302to decrement initial state by 2 to a state of the first digit of initialstate 308 to “2”, resulting in a displayed state of “2753”. Similarinputs may be made using modifiers 310 until user decides that thedisplayed state is a final state. When a final state is reached, theuser may select the “SUBMIT” button 312 which initiates a transmissionof a signal to display unit 302 that a final state has been reached.

When display unit 302 receives the signal indicating that a final statehas been reached, display unit 302 transmits the final state tocomputing system 200. Consistent with some embodiments, display unit 302may include instructions stored in the memory for execution by the oneor more processors for encrypting the final state before transmittingthe final state to computing system 200. Once computing system 200receives the final state, computing system 200 may then transmit thefinal state, along with other information, to the remote server. Theother information may include, for example, account information andpayment details. In some embodiments, computing system 200 may check anaccuracy or correctness of the final state before transmitting to theremote server. In some embodiments, display unit 302 may determine acorrectness or accuracy of the final state before transmission to mobiledevice. In some embodiments, display unit 302 may be in communicationwith the remote server and may be capable of transmitting the finalstate and any other information, which may be encrypted, to the remoteserver, wherein such communications are secure.

In some embodiments, a user, such as user 120, may interact with themodifiers 310 by touching modifiers and scrolling modifiers 310 in adirection if display component 214 is a touch-screen display. In someembodiments, a user may interact with modifiers 310 using an inputcomponent, such as input component 216, which may include, for example,a keyboard or key pad, whether physical or virtual. In some embodiments,a user may interact with modifiers 310 using a navigation controlcomponent, such as navigation control component 218 which may be amouse, a trackball, or other such device. Moreover, a user may interactwith modifiers 310 using sensors 222 which may be, for example, a cameraor a microphone. In some embodiments, the device or component used tointeract with modifiers 310 may be referred to as a sensor or sensorsthat are used to sense a state or character modification that maygenerate a signal for modifying characters or digits of a credential,such as initial state 308. In some embodiments, the generated signal maybe transmitted from computing system 200 to display unit 302 and mayinclude instructions for modifying a state, such as initial state 308,displayed on display unit 302, or individual characters within adisplayed state. In some embodiments, a displayed state may correspondto a credential, with individual digits, elements, or characters of thestate corresponding to digits, elements, or characters of thecredential. In some embodiments, the credential may correspond to apersonal identification number (PIN). In some embodiments, the PIN maybe a PIN generated based on a password, such as described in U.S. patentapplication Ser. No. 13/281,273, filed on Oct. 25, 2011, the entirecontents of which is incorporated by reference herein in its entirety.In some embodiments, the credential may correspond to a secretidentifier, which may be a credential that is known to user 120, and maybe a number associated with user 120, or a combination of numbersassociated with user 120. In one embodiment, a secret identifier maycorrespond to the last four digits of a Social Security number of user120. In another embodiment, a secret identifier may correspond to acombination of the last four digits of a Social Security number of user120 and a Zone Improvement Plan (ZIP) code of residence of user 120. Insome embodiments, display unit 302 may include a card and/or integratedcircuit (IC) chip reader, and the state may correspond to a credentialassociated with the card and/or IC chip.

FIG. 4 is a diagram illustrating a system including a computing systemin communication with a display unit having card or IC chip reader,consistent with some embodiments. System 400 is similar to system 300except that display unit 302 includes a card reader for reading afinancial transaction card 402, such as a credit or debit card. Further,the card reader may also include an IC chip reader for reading an ICchip 404 that may be embedded on card 402. Consistent with someembodiments, system 400 of display unit 402 and computing system 200displaying user interface 304 may be capable of processing transactionsusing EMV or Chip and PIN credit cards. In such embodiments, displayunit 302 displays an initial state 308 that includes four digits orcharacters. Although only four digits are shown, display unit 302 may becapable of displaying n digits or characters, consistent with thespecifications of display component 302. A user using computing system200 may interact with modifiers 310 to increment or decrement the digitsof the credential until the user decides that the displayed credentialis a final credential. When a final credential is reached, the user mayselect the “SUBMIT” button 312 or otherwise indicate that a finalcredential state has been reached, which initiates a transmission of asignal to display unit 302 that a final credential state has beenreached. When display unit 302 receives the signal indicating that afinal credential has been reached, display unit 302 transmits the finalcredential to computing system 200.

Consistent with some embodiments, display unit 302 may includeinstructions stored in the memory for execution by the one or moreprocessors for encrypting the final credential before transmitting thefinal credential to computing system 200. Once computing system 200receives the final PIN, computing system 200 may then transmit the finalcredential, along with other information, to remote server 106. Theother information may include, for example, account information andpayment details. In some embodiments, computing system 200 may check anaccuracy or correctness of the final credential before transmitting toremote server 106. In some embodiments, display unit 302 may determine acorrectness or accuracy of the final credential before transmission tocomputing system 200. In some embodiments, display unit 302 may be incommunication with remote server 106 and may be capable of transmittingthe final credential and any other information, which may be encrypted,to remote server 106 over network 108.

FIG. 5 is a diagram illustrating a system including a computing systemin communication with a display unit, consistent with some embodiments.System 500 is similar to system 300 except that display unit 302obfuscates the displayed state 502. In some embodiments, the charactersor digits of displayed state 502 may be obfuscated by starring thecharacters or digits of displayed state 502, blanking the characters ordigits of displayed state 502, or other obfuscation of displayed state502. Obfuscation of displayed state 502 may provide additional securityfor a user of system 500 by preventing an unauthorized person (e.g., a“shoulder surfer”) from viewing a final state of a user credentialdisplayed by display unit 302. In some embodiments, a character or digitof displayed state 502 may be shown normally for a predetermined amountof time sufficient for user to determine that the character or digit iscorrect before being obscured. In some embodiments, an initial state,such as initial state 308 shown in FIG. 3, may be a same initial stateeach time user uses system 500 such that user knows the initial stateand can modify the digits or characters with modifiers 304 to reach afinal state without having to explicitly see the displayed characters ordigits. Obfuscation of displayed state 502 may also be achieved bydisplaying state such that only user 120 can view the state, such as onan eyeglass projection screen of a head mounted display. Alternatively,obfuscation of displayed state 502 may be achieved by placing a hood orcover over display unit 302 so that only user 120 facing display unit302 may be able to view displayed state 502.

FIG. 6 is a diagram illustrating a system including a computing systemin communication with a display unit, consistent with some embodiments.System 600 is similar to systems 300 and 500, except that computingsystem 200 includes a display 600 configured to display characters ordigits of a credential. As shown in FIG. 6, display includes onecharacter or digit highlighted 602 indicating the current character ordigit. Consistent with some embodiments, system 600 may generate arandom state in display 600 (or display component 306 similar to system300) and user 120 may make a selection of a character or digit of acredential by moving computing device 200 such that an accelerometer insensing components detects the motion and changes the highlightedcharacter or digit 602 in display 600 or display unit 306 based on thedetected motion. For example, user 120 may tilt computing device up ordown to increase or decrease a value of highlighted character or digit602. User 120 may then tilt computing device to the right to movehighlight 602 to the next character or digit, and so forth. Once a finalstate has been reached that user 120 believes corresponds to theircredential, user 120 may then indicate a final state by pressing submitbutton 312, similar to systems 300 and 500, or other selection methodthat may be detected by sensor components 222. User 120 may be able toshake computing device vigorously to generate a new initial state andbegin the process again. The initial state and character ormodifications made thereto may occur on display 600 on computing device200 or on a coupled display unit 302.

FIG. 7 is a diagram illustrating a system including a computing systemin communication with a display unit, consistent with some embodiments.System 700 is similar to systems 300 and 500, except that computingsystem 200 may be in communication with a display unit 702 that maycorrespond to an automatic teller machine (ATM) display or a buildingentrance or door entry display. Consistent with some embodiments, system700 may operate in the same manner as system 300 or 500 except theentered credential may allow the user to enter a secured room orbuilding, or to enter their credential at an ATM machine. In suchembodiments, computing system 200 may be further in communication with abuilding security provider or a bank, such that an encrypted final stateof a credential that is provided by display unit is transmitted to thebuilding security provider or bank. In some embodiments, the displayedstate may be obfuscated similar to system 500.

FIG. 8 is a diagram illustrating a system including a computing systemin communication with a display unit, consistent with some embodiments.System 800 is similar to systems 300, 500, and 700, except thatcomputing system 200 operates similar to display unit 302 in systems300, 500, and 700, and terminal 802 operates similar to computing system200. That is, a user may be presented with a user interface 804 atterminal 802 that displays modifiers 806 that a user may interact within order to modify or otherwise change a state of a credential displayedby computing device 200 that is in communication with terminal 802.Terminal 802 may also include sensors 808 which may detect charactermodification by user and generate a character modification signal thatmay be used to modify a state of a credential displayed on computingsystem 200. Sensors 808 may be used along with modifiers 806 to modify astate of a credential by, for example, modifying individual digits orcharacters of the state of the credential. When a final state of acredential is displayed by computing system 200, the user may thenselect the “SUBMIT” button 810 to transmit the final state of thecredential to terminal 802, which may then transmit the final state ofcredential to remote server 106 over network 108, a building securityprovider, or a bank, consistent with previous embodiments. Moreover, thefinal state of the credential may be encrypted before transmission toterminal 802 and/or before transmission to remote server 106 overnetwork. Furthermore, computing system 200 may be in communication withremote server 106 over network 108, building security provider, or bankand may transmit the final state of credential to remote server 106 overnetwork 108, such transmissions being encrypted and secure.

FIG. 9 is a diagram illustrating a system including a computing systemin communication with a display unit, consistent with some embodiments.System 900 in FIG. 9 includes some similarities to system 300. System900 includes a computing system 200, depicted as a set-top box (STB),coupled to sensors 222 and a display unit 214. As shown in FIG. 9,sensors 222 may be a camera, such as a depth camera, or other type ofcamera capable of capturing image-related information. As shown in FIG.9, display unit 214 may display a user interface 304 that includes oneor more modifiers 310 that are used as inputs for transmitting signalsindicative of character or digit modifications for inputting acredential. Consistent with some embodiments, modifiers 310 mayrepresent a specific increment or decrement of the digits of thecredential, similar to system 300. In some embodiments, such as shown inFIG. 9, the modifiers may include numeric digits or characters and maybe configured to manipulated to display a credential. When a desiredcredential is reached, the user may select the “SUBMIT” button 312 whichinitiates a transmission of a signal to remote server 106 including anencrypted version of the credential. Although not shown in FIG. 9,system 900 may also be used with a display unit, such as display unit302 similar to system 300.

In some embodiments a user may be able to manipulate modifiers 310 bymaking motions with their hand or arm to select a character or digit ofa credential. For example, sensors 222 a camera, such as describedabove, that may be configured for detecting the motions made by theuser. Sensors 222 may detect this motion and translate the detectedmotion into an electrical signal that is sent to computing system 200.Computing system 200 may then translate the electrical signals intomanipulations of modifiers 310 that may be further displayed on displaycomponent 214. Consequently, a user of system 900 may be able to usesystem 900 to enter a credential that may be used, in some embodiments,to authenticate to a server such as remote server 106. In someembodiments, system 900 may correspond to a wearable computing device,wherein computing system 200 is wearable and includes coupled orintegrated sensors 222 such as a camera or a head-mounted display oreyeglass display corresponding to display component 214 or combinationthereof.

FIG. 10 is a diagram illustrating a one dimensional random sequence ofcharacters of a credential, consistent with some embodiments. Systems300, 400, 500, 600, 700, 800, and 900 shown in FIGS. 3-9 havingcharacters of a credential represented by digits that may be selected bymanipulating modifiers, such as in system 900 shown in FIG. 9, or havinga coupled display unit 302 that may be configured to display a statecorresponding to a credential, wherein modifiers 310 may be manipulatedto increment or decrement a specific digit or character to ultimatelyobtain a desired state that may be indicative of a credential. FIGS.10-12, however, show additional character credential selection andmodification systems, consistent with some embodiments. The charactercredential selection and modification systems shown in FIGS. 10-12 maybe combined with the selection methods and systems shown in anddiscussed with respect to FIGS. 3-9.

As shown in FIG. 10, sequence 1000 having one of the numbers thereofhighlighted by a box 1002 may be displayed in user interface 304 ondisplay component 214 for user selection. Sequence 1000 may be providedto client computing device 102 by remote server 106 throughauthentication apps 122 and 112. Sequence 1000 may also be generated byclient computing device 102 by authentication app 112. In someembodiments, a user may be able to manipulate box 1002 to select acharacter or digit of a credential. Manipulations may be made bytouching box 1002 and moving box 1002 by touching, if display component214 is a touch-screen display. In some embodiments, a user maymanipulate box using an input component, such as input component 216,which may include, for example, a keyboard or key pad, whether physicalor virtual. In some embodiments, a user may manipulate box 1002 using anavigation control component, such as navigation control component 218which may be a mouse, a trackball, or other such device. Moreover, auser may manipulate box 1002 by making motions or gestures that arecaptured by sensors 222. In some embodiments, sensors 222 may correspondto a camera, such as shown in FIG. 9, that is coupled to a set-top boxcoupled to a display component that displays sequence 1000 and box.Sensors 222 may correspond to a camera that is coupled to or integratedwith a wearable computing device including a head-mounted display oreyeglass display that displays sequence 1000 and box 1002. Sensors 222may also correspond to a brain wave sensor, such as an EEG.

Returning to FIG. 10, sequence 1000 is as being oriented horizontallybut, however, may be oriented vertically or at any angle. Moreover,sequence 1000 need not be linear and can be curved. Sequence 1000 mayhave any shape or configuration. Box 1002 may highlight one or more ofthe digits or characters at a time. Although a box is shown, it mayother means may be used for highlighting the displayed character ordigits in sequence 1000. In some embodiments, box 1002 may bemanipulated to move from left to right across the digits or charactersor from right to left across the digits or characters. After sweepingacross the characters or digits, box 1002 may begin a new sweep in thesame direction as the previous sweep or can sweep back and forth so asto alternate sweeping directions. Box 1002 may move randomly or in anyother fashion across or among the characters or digits of sequence 1000.

In some embodiments, instead of a user manipulating box 1002 to moveacross character or digits of sequence 1000 to select a character ordigit of a credential, box 1002 may automatically move at any desiredspeed across the characters or digits of sequence 1000. For example, box1002 may move sufficiently rapidly across the characters or digits ofsequence 1000 so as to inhibit a bystander from readily determiningwhich number is being selected by the user. Box 1002 may movesufficiently slowly across the characters or digits of sequence 1000 soas to allow the user to reliably select a desired character or digit ofsequence 1000. In some embodiments, a first random sequence 1000 ispresented to the user and box 1002 begins to move across the charactersor digits of sequence 1000. In some embodiments, box 1002 may moveacross the character or digits of sequence 1000 at a rate that changesas a function of time, such that experienced users may have a rate thatis greater than less experienced users. In some embodiments, the ratemay be provided by authentication app 122 of remote server 106 to clientcomputing device 102 as part of an authentication process. Informationrepresentative of when box 1002 begins to move, e.g., timinginformation, may be communicated to client computing device 102 and/orremote server 106. When a first character or digit of the user'scredential is highlighted, the user may make a selection of thatcharacter or digit by manipulating box 1002 in at least one of the waysdescribed previously. Information representative of the time of theselection, e.g., timing information, may be communicated to clientcomputing device 102 and/or remote server 106, which may determine whichcharacter or digit of sequence 1000 was selected using the known randomsequence 1000 and the timing information. The timing information may bethe elapsed time between the start of each sweep across the charactersor digits of sequence 1000 and the time at which the user manipulatedbox 1002 to select a character or digit. This process can repeat foreach character or digit of the user's credential. When the entirecredential has been entered, the user can indicate that the credentialis in a final state by pressing a submit button, such as submit button312. Alternatively, the process may be automatically ended when a validcredential has been entered or when a predetermined number of charactersor digits has been selected. In some embodiments, the timing of theselection can be used to calculate a position of box 1002 and thehighlighted character or digit rather than transmitting the selectedcharacter or digit to computing system 200, display unit 302, or remoteserver 106. Moreover, in some embodiments, a beginning position,movement or sweep rate of box 1002 may be randomly initialized for eachattempt. Further, a behavior of the movement or sweep may be changed oneach presentation to either reverse at an end of the characters ordigits of sequence 1000 or wrap around to a beginning of sequence 1000.

FIG. 11 is a diagram illustrating a two dimensional random sequence ofcharacters of a credential, consistent with some embodiments. Sequence1100 shown in FIG. 11 is similar to sequence 1000 shown in FIG. 10,except has character or digits arranged in two dimensions. Box 1102 maybe manipulated to select a character or digit of a credential in amanner similar to box 1002 described above with respect to FIG. 10.Although sequence 1100 is shown as being rectangular, in someembodiments, sequence 1100 may be elongated, square, round, oval, or anyother shape.

Box 1102 may highlight one or more characters or digits of sequence 1100at a time. Box 1102 may automatically move, or be manipulated to move,randomly or in any other fashion across or among the characters ordigits of sequence 1100. Moreover, box 1102 may move at any desiredspeed across the characters or digits of sequence 1100. In someembodiments, a user may select characters or digits of sequence 1100 bymanipulating box 1102 or, if box is moving automatically, can provide anindication when box 1102 is on a character or digit of a credential,similarly to sequence 1000 in FIG. 10, except that box 1102 may move orbe manipulated in two dimensions, e.g., from side to side and up anddown instead of in one dimension e.g., only from side to side.

FIG. 12 is a diagram illustrating a two dimensional random array ofcharacters of a credential, consistent with some embodiments. As shownin FIG. 12, array 1200 may have one row of two digit charactersindicated by a row highlight 1202 and having one column indicated by acolumn highlight 1204, in accordance with one or more embodiments. Rowhighlight and 1202 and column highlight 1204 may intersect and form abox 1206 which may indicate a selected two digit character. In someembodiments, manipulating row highlight 1202 and column highlight 1204may allow a user to select two characters or digits of a credential at atime, such that a credential having four characters or digits may beselected by two selections, and a credential having six characters ordigits may be selected by three selections, and so forth. Row highlight1202 and column highlight 1204 may be automatically scanned up and downand left to right, respectively, or may be manipulated by a user similarto box 1002 described with respect to FIG. 10. Moreover, a user mayselect characters of a credential from array 1200 similar to how a userwould select characters from sequence 1000 or 1100, in some embodiments.

The characters or digits of sequences 1000 and 1100 and array 1200 maybe present in an image (such as a raster image) or text (such as ASCIItext). In some embodiments, characters or digits of sequences 1000 and1100 and array 1200 may have a different font, size, alignment and/orspacing. A series of images may be used to show the highlight movingfrom one number, row, or column to another. Sequences 1000 and 1100 andarray 1200 may be created by a service such as an image service providedby, for example, authentication app 122 of remote server 106 orauthentication app 112 of client computing device 112. Timinginformation may be communicated from client computing device 102 to theremote server 106 to determine each selected character or digit of acredential.

FIG. 13 is a flowchart illustrating a method for inputting a state,consistent with some embodiments. For the purpose of illustration, FIG.13 may be described with reference to any of FIGS. 1-9. The method shownin FIG. 13 may be embodied in computer-readable instructions forexecution by one or more processors such that the steps of the methodmay be performed by computing system 200 and/or display unit 302. Asshown in FIG. 13, display unit 302 may generate an initial state 308(1302) that may be displayed by a display component 306 of display unit302 (1304). Display unit 302 may then receive signals for modifyinginitial state 308 (1306). Consistent with some embodiments, the signalsfor modifying initial state 308 may be generated by computing system 200in communication with display unit 302. Display unit 302 may thenreceive a signal indicating that the displayed state is the final state(1308). Display unit 302 may then encrypt the final state (1310) andtransmit the encrypted final state (1312). Consistent with someembodiments, the encrypted final state may be transmitted to computingsystem 200 or remote server 106. Moreover, the final state may beauthenticated before transmitting. In some embodiments, theauthentication may be performed by checking at least one of a digitalsignature or a MAC address associated with display unit 302. Althoughthe steps shown in FIG. 13 are described as being performed by displayunit 302, they may also be performed by computing system 200, or acombination thereof.

FIG. 14 is a flowchart illustrating a method for character credentialselection, consistent with some embodiments. For the purpose ofillustration, FIG. 14 may be described with reference to any of FIGS.1-9. The method shown in FIG. 14 may be embodied in computer-readableinstructions for execution by one or more processors such that the stepsof the method may be performed by computing system 200. As shown in FIG.14, the method includes detecting a character selection (1402). In someembodiments, a character selection may be detected by sensors 222, whichmay be a camera, microphone, accelerometer, or brain wave sensor such asan EEG. In some embodiments, a character selection may be detected by atouch-screen device having an integrated touch sensor. Characterselection may be made by manipulating modifiers 310 to increment ordecrement a character or digit of a credential state displayed on acoupled display unit 302. Character selection may be made bymanipulating box 1002, 1102, or row highlight 1202 and column highlight1204 until a desired character or digit is highlighted for selection.Character selection may also be made by making an indication when box1002 or 1102, or row highlight 1202 and/or column highlight 1204 arehighlighting a desired character or digit. Moreover, character selectionmay be made by manipulating modifiers 310 until a desired character ordigit is highlighted for selection. Modifiers 310 and boxes 1002 and1102, and row highlight 1202 and column highlight 1204 may bemanipulated using at least one of input component 216 and navigationcontrol component 218, or sensors 222, which may detect a motion ormovement or other information associated with a user.

The detection of a character selection may generate a characterselection signal (1404). In some embodiments, the character selectionsignal may include information related to the character selection, suchas the selected character or digit. Steps 1402 and 1404 may be repeateduntil a character selection completion is detected (1406). In someembodiments, detecting a character selection completion includesdetecting a user pressing submit button 312 in user interface 304.Detecting a character selection completion may also include detectingwhen user makes an indication that character selection is complete, avalid credential has been entered, or when a predetermined number of orcharacters or digits has been selected. A character selection completionsignal may then be generated (1408). One or more processors ofprocessing component 206 may then receive the character selection signand character selection completion signal (1410) and generate an outputsignal (1412). In some embodiments, the generated output signal mayinclude credential components. The credential components may include theselected character or digits of the credential. The credentialcomponents may include additional information associated with acredential, such as a user name, account information, and transactionamount. Network interface component 202 may then transmit the generatedoutput signal (1414). In some embodiments, the generated output signalmay be transmitted to remote server 106 over network 108 forauthenticating with remote server 106 or to authorize a payment.Although the steps shown in FIG. 14 are described as being performed bycomputing system 200, they may also be performed by display unit 302,remote server 106, or a combination thereof.

FIG. 15 is a flowchart illustrating a method character credentialselection, consistent with some embodiments. For the purpose ofillustration, FIG. 15 may be described with reference to any of FIGS.1-12. The method shown in FIG. 15 may be embodied in computer-readableinstructions for execution by one or more processors such that the stepsof the method may be performed by computing system 200 and/or displayunit 302. As shown in FIG. 15, the method begins by displaying asequence of character credentials (1502). In some embodiments, thedisplayed sequence may be a one-dimensional sequence, such as sequence1000, a two-dimensional sequence such as sequence 1100, or an array suchas array 1200. Moreover, the characters in the sequence may be randomlygenerated, and may include characters or digits that make up acredential of user 120. Further, the displayed sequence may be displayedbased on instructions received from remote server 106 when clientcomputing device 102 attempts to authenticate to remote server 106. Thesequence may be displayed on display component 214 of computing device200, which may correspond to client computing device 102, or displaycomponent 306 of display unit 302. A first credential character in thesequence may be highlighted (1504). The first credential character thatis highlighted may be any character in the displayed sequence, and maybe chosen randomly. Moreover, the credential character that ishighlighted may be highlighted by a box, such as box 1002 or 1102, or arow or column such as shown in FIG. 12.

Remaining characters in the sequence may then be periodicallyhighlighted at a predetermined rate (1506). The rate may be variablebased on a user's experience with the character credential selectionmethod, or the rate may be fixed. The rate may be determined accordingto instructions provided by remote server 106 during an authenticationattempt, or may be set locally by authentication app 112 or user 120. Acharacter credential selection may then be detected (1508). In someembodiments, a character selection may be detected by sensors 222, whichmay be a camera, microphone, accelerometer, or brain wave sensor such asan EEG. In some embodiments, a character selection may be detected by atouch-screen device having an integrated touch sensor. Characterselection may also be made by making an indication when box 1002 or1102, or row highlight 1202 and/or column highlight 1204 arehighlighting a desired character or digit, that is detected by sensors222. Processing component 206 may then determine timing information fromthe detected character selection and the known rate of highlighting(1510).

A determination may then be made to see if a character selectioncompletion has been detected (1512). In some embodiments, detecting acharacter selection completion includes detecting a user pressing submitbutton 312 in user interface 304. Detecting a character selectioncompletion may also include detecting when user makes an indication thatcharacter selection is complete, a valid credential has been entered, orwhen a predetermined number of or characters or digits has beenselected. If a character selection completion has not been detected,steps 1506-1510 may be repeated. If a character selection completion isdetected, processing component 206 may reconstruct the credential basedon the determined timing information (1514) and transmit an outputsignal including the reconstructed credential (1516). In someembodiments, only the timing information may be included in the outputsignal such that remote server 106 reconstructs the credentialserver-side for added security.

Software, in accordance with the present disclosure, such as programcode and/or data, may be stored on one or more machine-readable mediums,including non-transitory machine-readable medium. It is alsocontemplated that software identified herein may be implemented usingone or more general purpose or specific purpose computers and/orcomputer systems, networked and/or otherwise. Where applicable, theordering of various steps described herein may be changed, combined intocomposite steps, and/or separated into sub-steps to provide featuresdescribed herein.

Consequently, embodiments as described herein may provide methods,systems, and devices capable of securely processing transactionsinvolving a PIN. For examples, embodiments as described herein mayenable the secure input of PINs using an input device in communicationwith a display device that displays the PIN being input. In particular,embodiments as described herein may be used to enable secure mobilepayment processing of chip and PIN cards using a mobile device andmobile card and IC chip reader. The examples provided above areexemplary only and are not intended to be limiting. One skilled in theart may readily devise other systems consistent with the disclosedembodiments which are intended to be within the scope of thisdisclosure. As such, the application is limited only by the followingclaims.

What is claimed is:
 1. A credential character selection system, thesystem comprising: a non-transitory memory; a network interfacecomponent; a display device; one or more sensors, the one or moresensors configured to: detect a character selection and generate acharacter selection signal; detect a character selection completion andgenerate a character selection completion signal; and one or morehardware processors coupled to the non-transitory memory, the networkinterface component, the display device, and the one or more sensors,the one or more hardware processors being configured to readinstructions from the non-transitory memory to cause the system toperform operations comprising: receiving, via the network interfacecomponent and from a remote server, a random sequence of characters anda display rate; displaying, on the display device, the random sequenceof characters; begin highlighting each character in the random sequenceof characters in turn based on the display rate; determining an elapsedtime between the beginning of the highlighting and the generation of thecharacter selection signal; generating an output signal comprising theelapsed time, the elapsed time being usable by the remote server todetermine a selected one of the characters in the random sequence ofcharacters; and transmitting the output signal to the remote server. 2.The system of claim 1, wherein the one or more sensors comprise at leastone of a camera, a microphone, an accelerometer, a button or switch, anda brain-wave sensor.
 3. The system of claim 1, wherein the selected oneof the characters is associated with a credential.
 4. The system ofclaim 3, wherein the credential comprises a personal identificationnumber (PIN).
 5. The system of claim 3, wherein the credential comprisesa secret identifier.
 6. The system of claim 1, wherein each of thecharacters in the random sequence of characters is highlighted in turn.7. The system of claim 6, wherein the character selection occurs whilethe selected one of the characters is highlighted.
 8. The system ofclaim 1, wherein the operations further comprise obfuscating each of thecharacters in the random sequence of characters.
 9. A method ofcredential character selection, the method comprising: receiving, via anetwork interface component and from a remote server a random sequenceof characters and a display rate; displaying, on a display device, therandom sequence of characters; begin highlighting each character in therandom sequence of characters in turn based on the display rate;detecting, using one or more sensors, a character selection;determining, by one or more processors, an elapsed time between thebeginning of the highlighting and the detection of the characterselection; generating, by the one or more processors, an output signalcomprising the elapsed time, the elapsed time being usable by the remoteserver to determine a selected one of the characters in the randomsequence of characters; and transmitting, using the network interfacecomponent, the output signal to the remote server.
 10. The method ofclaim 9, wherein the method further comprises highlighting each of thecharacters in the random sequence of characters.
 11. The method of claim10, wherein the character selection occurs while the selected one of thecharacters is highlighted.
 12. The method of claim 9, further comprisingobfuscating each of the plurality of characters in the random sequenceof characters.
 13. The method of claim 9, wherein the one or moresensors comprise at least one of a camera, a microphone, anaccelerometer, a button or switch, and a brain-wave sensor.
 14. Themethod of claim 9, wherein the selected one of the characters isassociated with a credential.
 15. The method of claim 14, wherein thecredential comprises a personal identification number (PIN).
 16. Themethod of claim 14, wherein the credential comprises a secretidentifier.
 17. The method of claim 9, further comprising detecting,using the one or more sensors, a character selection completion.
 18. Anon-transitory computer-readable medium having stored thereonmachine-readable instructions executable to cause a machine to performoperations comprising: receiving, via a network interface component andfrom a remote server, a random sequence of characters and a displayrate; displaying, on a display device, the random sequence ofcharacters; begin highlighting each character in the random sequence ofcharacters in turn based on the display rate; detecting, using one ormore sensors, a character selection; determining an elapsed time betweenthe beginning of the highlighting and the detection of the characterselection; generating an output signal comprising the elapsed time, theelapsed time being usable by the remote server to determine a selectedone of the characters in the random sequence of characters; andtransmitting, using the network interface component, the output signalto the remote server.
 19. The non-transitory computer-readable medium ofclaim 18, wherein the operations further comprise highlighting each ofthe characters in the random sequence of characters.
 20. Thenon-transitory computer-readable medium of claim 19, wherein thecharacter selection occurs while the selected one of the characters ishighlighted.
 21. The non-transitory computer-readable medium of claim18, wherein the operations further comprise obfuscating each of theplurality of characters in the random sequence of characters.
 22. Thenon-transitory computer-readable medium of claim 18, wherein the one ormore sensors comprise at least one of a camera, a microphone, anaccelerometer, a button or switch, and a brain-wave sensor.
 23. Thenon-transitory computer-readable medium of claim 18, wherein theselected one of the characters is associated with a credential.
 24. Thenon-transitory computer-readable medium of claim 23, wherein thecredential comprises a personal identification number (PIN).
 25. Thenon-transitory computer-readable medium of claim 23, wherein thecredential comprises a secret identifier.
 26. The non-transitorycomputer-readable medium of claim 18, wherein the operations furthercomprise detecting, using the one or more sensors, a character selectioncompletion.